> Is this double keyed? My understanding is yes, that the spec requires permissions to be double keyed.
I believe Chrome grants to top-level origin, which delegates permission through feature policy. This is what Firefox plans to implement as well.
The benefits are comparable to double-keying: no permissions are persisted to the iframe's origin, by itself or across different top-level origins.
--
GitHub Notification of comment by jan-ivar
Please view or discuss this issue at https://github.com/w3c/mediacapture-main/issues/630#issuecomment-544302753 using your GitHub account